Cybercrime used to have a ‘"tell." It was the digital equivalent of a villain stroking their cat - clunky grammar, misspelt links and suspicious attachments that screamed ‘phishing’.

When we formed the global steering committee for our KnowBe4 Student Edition, our primary goal was to simply listen. That listening paid off during a pivotal conversation with a private research university in Florida.

Security must evolve from a static training program into dynamic, AI-powered human and AI risk orchestration embedded across the organization.

Every year, KnowBe4 analyzes millions of simulated phishing tests to measure one thing: how likely is your workforce to fall for a phishing attack? The results, published in the 2026 Phishing by Industry Benchmarking Report, paint a clear picture of where human risk concentrates — and what organizations can do about it.

The INC ransomware-as-a-service (RaaS) operation has grown into one of the premier ransomware offerings, claiming hundreds of victims in 2026 alone, according to researchers at Acronis. The attackers target a broad range of industries, but have recently prioritized entities in the legal sector.

In cybersecurity, attention has become one of our most valuable resources. Modern digital habits have fundamentally changed how we consume information, giving rise to "TikTok Brain." An environment of constant notifications, endless content streams and competing demands on our focus, has changed how we consume information and, more importantly, how we make decisions.

A new report from SpyCloud has found that phishing attacks have exposed employee data at 86% of Fortune 100 companies over the past 12 months, with the technology, airline and automotive sectors being hit the hardest. The researchers also found that 78% of organizations experienced an increase in phishing volume over the past year.

I saw a venn diagram on social media. One circle is Shadow IT, one circle is Shadow AI, a substantial overlap, and the implicit message is that they are effectively the same challenge.

Remember when "social media safety" meant advising employees not to post pictures of their security badges or laptop screens?